Privacy Policy
Privacy for Robert’s private Hermes automation
This policy describes the Google account data used by a private, single-user Hermes service operated by Robert Piazza.
Last updated: September 17, 2026
Operator and contact
Robert Piazza operates this personal service. Contact: piazzr2@gmail.com.
Google data used
Only when Robert connects a Google account and directs a task, Hermes may access or act on the following categories of Google data:
- Gmail message content and mail metadata, including reading, searching, labeling, modifying, composing, and sending email.
- Google Calendar event details.
- Google Contacts profile data.
- Google Docs document content.
- Google Drive files and file metadata.
- Google Sheets spreadsheets and their data.
The standard Google OAuth permissions are: gmail.modify, calendar.events, drive.readonly, contacts.readonly, spreadsheets, and documents.readonly. When Robert explicitly chooses the Drive-upload feature, Hermes requests the separate drive.file permission; it is not requested during normal authorization.
Why it is used
Google data is used only to carry out Robert’s user-directed personal automation, such as finding information, preparing or sending requested email, working with calendars, and working with files or documents. It is not used for unrelated purposes.
Storage and processing
Data may be processed or retained on Robert’s private Hermes host and within the Google services Robert connects. The specific host configuration and location may change over time.
When a user-directed task requires interaction with a configured AI model or provider, relevant Google data or task content may be included in that interaction to perform the task. This policy does not make claims about any provider’s separate data practices.
Google API Limited Use
Google user data is not sold, used for advertising, or used for data brokerage. It is not shared except as needed to carry out Robert’s user-directed functionality, as required by law, or as Robert explicitly directs. This is the intended use of Google user data under the Google API Services User Data Policy, including its Limited Use requirements.
Access, retention, and removal
Robert controls access to this private service and the Google account connections he authorizes. He can revoke a Google connection or adjust its permissions through the relevant account controls.
Retention depends on the requested task, private-host configuration, and connected providers; this service does not promise a fixed retention period. For locally retained operational data, Robert can review or remove data through the private host as appropriate. Questions or removal requests can be sent to piazzr2@gmail.com.
Security
This service is operated on a private personal host. Reasonable care is taken in operating it, but no system can guarantee complete security. This policy does not promise a particular security control, certification, or outcome.
Updates and contact
This policy may be updated if the service or its connected data use changes. For questions about this policy, contact piazzr2@gmail.com.